UtilNest (utilnest.io) is a collection of converters, calculators and utilities. This policy explains what happens to information when you use it. We wrote it to describe exactly what the site does today, including optional accounts; when file conversion or paid plans launch, we will update it before they go live.
The short version
- Most tools run entirely in your browser. What you type into a calculator, converter, hash or JWT tool is processed on your device and never sent to us. The exception is the currency converter, which asks our server for the day's exchange rate (only the two currency codes, never your amount).
- Accounts are optional. If you create one, we keep your email address, your plan and the preferences you choose to sync, and nothing else.
- We do not use cookies to track you, do not sell personal data and do not build advertising profiles ourselves.
- Advertising, when it is switched on, comes from Google AdSense and asks for your consent where the law requires it.
What we collect
Delivery and security logs. The site is served by Cloudflare. To deliver pages and block attacks, Cloudflare processes technical data for each request, such as IP address, browser user agent, requested URL and time. We use it only for security and reliability; Cloudflare keeps it for a limited period under its own terms.
Aggregate visit statistics. We use Cloudflare Web Analytics, which counts page views and performance without cookies or fingerprinting and without identifying individual visitors.
Searches with no results. When a search in the site's search box finds nothing, the text of that search (up to 100 characters), the page language and the country derived from the connection are stored, without IP address, cookie or any identifier, so we can decide which tools to build next. Please do not type personal information into the search box. These records are kept for up to 3 months.
If you create an account. Sign-in is provided by Clerk. We receive and store your Clerk user ID, email address, plan, an optional region, and the creation and update times. If you sign in with Google, Apple or GitHub, Clerk receives your basic profile from that provider; we only keep the fields above. Signed-in visitors can sync a few preferences across devices: theme, recently used tools and the last currency pair. These are stored with your account on our servers in Finland and deleted with it.
Usage limits. To enforce daily limits on server-backed tools (such as the currency converter), we count requests per day. For signed-in users the counter is tied to the account. For everyone else it is tied to a keyed one-way hash of the IP address; the IP itself is never stored. Counters expire after 48 hours. Daily totals are kept for reporting and abuse prevention: 30 days for anonymous use, 13 months for accounts, and they are deleted with your account. When a network makes many requests we may ask for a Cloudflare Turnstile check, which Cloudflare processes to tell people from bots.
On your device only. We store a few preferences in your browser: your light or dark theme, the tools you recently opened from the search box (local storage) and your chosen language (a loc cookie). They are never sent to us except the language cookie, which only selects the language of the home page.
Advertising
Free pages may show ads from Google AdSense. Before ads are shown in the European Economic Area, the United Kingdom, Switzerland, Brazil and US states with consumer privacy laws, a consent message from Google's certified consent platform lets you accept, refuse or choose purposes. If you do not consent, only non-personalized ads are shown. Google's use of data is described at policies.google.com/technologies/partner-sites. You can change your choice at any time with the "Privacy settings" link that appears in the footer once ads are enabled.
Legal bases (LGPD and GDPR)
- Delivery, security, usage limits and zero-result search records: our legitimate interest in running a secure, useful, abuse-resistant site (LGPD art. 7º IX; GDPR art. 6(1)(f)).
- Accounts and synced preferences: performing the service you signed up for (LGPD art. 7º V; GDPR art. 6(1)(b)).
- Personalized advertising: your consent (LGPD art. 7º I; GDPR art. 6(1)(a)), which you can withdraw at any time.
Who receives data
Cloudflare, Inc. (hosting, security, Turnstile and analytics), Clerk, Inc. (sign-in and account management, United States), Hetzner Online GmbH (our servers, Finland) and, when ads are enabled, Google (advertising). They may process data outside your country under standard contractual clauses or equivalent safeguards.
Your rights
Under the LGPD, the GDPR and US state laws you can ask to access, correct or delete personal data, to object to processing, to withdraw consent and to complain to your data protection authority (in Brazil, the ANPD). If you have an account you can delete it yourself from the account page (Security → Delete account); your account data, synced preferences and usage history are removed from our servers within 24 hours. Data about visitors without an account cannot be linked to them; write to us and we will help with any request.
Contact
Data controller: João Pereira, Estrada Fraze, 90, Casa 7, Parque do Imbuí, Teresópolis, RJ, 25970-460, Brazil. Email: privacy@utilnest.io.
Changes
We will update this page, and its date, before any change in what we collect takes effect.